diff options
Diffstat (limited to 'templates/vpn/ipsec/site-to-site')
14 files changed, 36 insertions, 0 deletions
diff --git a/templates/vpn/ipsec/site-to-site/node.def b/templates/vpn/ipsec/site-to-site/node.def new file mode 100644 index 0000000..a36d2ae --- /dev/null +++ b/templates/vpn/ipsec/site-to-site/node.def @@ -0,0 +1 @@ +help: "Configure site to site VPN" diff --git a/templates/vpn/ipsec/site-to-site/peer/node.def b/templates/vpn/ipsec/site-to-site/peer/node.def new file mode 100644 index 0000000..ae179bd --- /dev/null +++ b/templates/vpn/ipsec/site-to-site/peer/node.def @@ -0,0 +1,3 @@ +tag: +type: ipv4 +help: "Configure VPN peers" diff --git a/templates/vpn/ipsec/site-to-site/peer/node.tag/authentication/mode/node.def b/templates/vpn/ipsec/site-to-site/peer/node.tag/authentication/mode/node.def new file mode 100644 index 0000000..5412926 --- /dev/null +++ b/templates/vpn/ipsec/site-to-site/peer/node.tag/authentication/mode/node.def @@ -0,0 +1,4 @@ +help: "Configure authentication mode" +type: txt +default: "pre-shared-secret" +syntax: $(@) in "pre-shared-secret", "rsa"; "must be pre-shared-secret or rsa" diff --git a/templates/vpn/ipsec/site-to-site/peer/node.tag/authentication/node.def b/templates/vpn/ipsec/site-to-site/peer/node.tag/authentication/node.def new file mode 100644 index 0000000..78540d6 --- /dev/null +++ b/templates/vpn/ipsec/site-to-site/peer/node.tag/authentication/node.def @@ -0,0 +1 @@ +help: "Configure peer authentication" diff --git a/templates/vpn/ipsec/site-to-site/peer/node.tag/authentication/pre-shared-secret/node.def b/templates/vpn/ipsec/site-to-site/peer/node.tag/authentication/pre-shared-secret/node.def new file mode 100644 index 0000000..db096e4 --- /dev/null +++ b/templates/vpn/ipsec/site-to-site/peer/node.tag/authentication/pre-shared-secret/node.def @@ -0,0 +1,3 @@ +help: "Set pre-shared secret key" +type: txt +syntax: pattern $(@) "^[-_a-zA-Z0-9.]+$" ; "invalid pre-shared secret key \"$(@)\"" diff --git a/templates/vpn/ipsec/site-to-site/peer/node.tag/authentication/rsa-key-name/node.def b/templates/vpn/ipsec/site-to-site/peer/node.tag/authentication/rsa-key-name/node.def new file mode 100644 index 0000000..c048fe8 --- /dev/null +++ b/templates/vpn/ipsec/site-to-site/peer/node.tag/authentication/rsa-key-name/node.def @@ -0,0 +1,3 @@ +help: "Set RSA key name" +type: txt +syntax: pattern $(@) "^[-_a-zA-Z0-9.]+$" ; "invalid RSA key name \"$(@)\"" diff --git a/templates/vpn/ipsec/site-to-site/peer/node.tag/ike-group/node.def b/templates/vpn/ipsec/site-to-site/peer/node.tag/ike-group/node.def new file mode 100644 index 0000000..d70c5ca --- /dev/null +++ b/templates/vpn/ipsec/site-to-site/peer/node.tag/ike-group/node.def @@ -0,0 +1,2 @@ +help: "Set IKE group name" +type: txt diff --git a/templates/vpn/ipsec/site-to-site/peer/node.tag/local-ip/node.def b/templates/vpn/ipsec/site-to-site/peer/node.tag/local-ip/node.def new file mode 100644 index 0000000..967cf73 --- /dev/null +++ b/templates/vpn/ipsec/site-to-site/peer/node.tag/local-ip/node.def @@ -0,0 +1,2 @@ +help: "Set local interface address" +type: ipv4 diff --git a/templates/vpn/ipsec/site-to-site/peer/node.tag/tunnel/node.def b/templates/vpn/ipsec/site-to-site/peer/node.tag/tunnel/node.def new file mode 100644 index 0000000..943122f --- /dev/null +++ b/templates/vpn/ipsec/site-to-site/peer/node.tag/tunnel/node.def @@ -0,0 +1,3 @@ +tag: +type: u32 +help: "Configure peer tunnel" diff --git a/templates/vpn/ipsec/site-to-site/peer/node.tag/tunnel/node.tag/allow-nat-networks/node.def b/templates/vpn/ipsec/site-to-site/peer/node.tag/tunnel/node.tag/allow-nat-networks/node.def new file mode 100644 index 0000000..b8e6454 --- /dev/null +++ b/templates/vpn/ipsec/site-to-site/peer/node.tag/tunnel/node.tag/allow-nat-networks/node.def @@ -0,0 +1,4 @@ +help: "Set NAT networks" +type: txt +default: "disable" +syntax: $(@) in "enable", "disable"; "must be enable or disable" diff --git a/templates/vpn/ipsec/site-to-site/peer/node.tag/tunnel/node.tag/allow-public-networks/node.def b/templates/vpn/ipsec/site-to-site/peer/node.tag/tunnel/node.tag/allow-public-networks/node.def new file mode 100644 index 0000000..7c18e68 --- /dev/null +++ b/templates/vpn/ipsec/site-to-site/peer/node.tag/tunnel/node.tag/allow-public-networks/node.def @@ -0,0 +1,4 @@ +help: "Set public networks" +type: txt +default: "disable" +syntax: $(@) in "enable", "disable"; "must be enable or disable" diff --git a/templates/vpn/ipsec/site-to-site/peer/node.tag/tunnel/node.tag/esp-group/node.def b/templates/vpn/ipsec/site-to-site/peer/node.tag/tunnel/node.tag/esp-group/node.def new file mode 100644 index 0000000..478139e --- /dev/null +++ b/templates/vpn/ipsec/site-to-site/peer/node.tag/tunnel/node.tag/esp-group/node.def @@ -0,0 +1,2 @@ +help: "Set ESP group name" +type: txt diff --git a/templates/vpn/ipsec/site-to-site/peer/node.tag/tunnel/node.tag/local-subnet/node.def b/templates/vpn/ipsec/site-to-site/peer/node.tag/tunnel/node.tag/local-subnet/node.def new file mode 100644 index 0000000..3e9d176 --- /dev/null +++ b/templates/vpn/ipsec/site-to-site/peer/node.tag/tunnel/node.tag/local-subnet/node.def @@ -0,0 +1,2 @@ +help: "Set local subnet" +type: ipv4net diff --git a/templates/vpn/ipsec/site-to-site/peer/node.tag/tunnel/node.tag/remote-subnet/node.def b/templates/vpn/ipsec/site-to-site/peer/node.tag/tunnel/node.tag/remote-subnet/node.def new file mode 100644 index 0000000..b3653e7 --- /dev/null +++ b/templates/vpn/ipsec/site-to-site/peer/node.tag/tunnel/node.tag/remote-subnet/node.def @@ -0,0 +1,2 @@ +help: "Set remote subnet" +type: ipv4net |